CVE-2026-10947

chromium-browser: Use after free in WebRTC

View on CVE.org
Published Jun 4, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Analysis

AI-generated

Technical impact

Google Chrome versions earlier than 149.0.7827.53 contain a use‑after‑free vulnerability in the WebRTC component. The flaw allows a remote attacker to deliver a specially crafted HTML page that can trigger the memory corruption, enabling execution of arbitrary code inside the browser sandbox. This is a classic CWE‑416 and CWE‑825 flaw.

Affected Systems

All installations of Google Chrome running any build older than 149.0.7827.53 are affected, including stable channel releases. Users with those versions remain at risk until they apply the update.

Risk and Exploitability

The vulnerability is exploitable by presenting a crafted HTML page to a user who opens it in Chrome. Attackers could host such pages or embed them in malicious links. The CVSS score is 8.8, indicating a high severity level. The EPSS score of < 1% indicates a very low exploitation probability, and the bug is not listed in CISA KEV, so exploitation likelihood is not quantified. The Chromium security severity is marked high.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 149.0.7827.53 or later to eliminate the use‑after‑free flaw
  • Configure Chrome to enable automatic updates to ensure the patch is applied promptly
  • If an update cannot be applied immediately, consider disabling WebRTC via browser policy or an extension to prevent the vulnerable code path from executing

Generated by OpenCVE AI on June 7, 2026 at 14:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
Type Values Removed Values Added
Title Use-After-Free in Chrome WebRTC Enables Remote Code Execution chromium-browser: Use after free in WebRTC
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Important
Type Values Removed Values Added
Title Use-After-Free in Chrome WebRTC Enables Remote Code Execution
Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References
Earlier changes (1)
Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Jun 5, 2026, 12:31 AM
Reserved
Jun 4, 2026, 5:06 PM

View source JSON

Updated
Jun 5, 2026, 12:26 AM

JSON

Status
Analyzed
Published
Jun 4, 2026, 11:16 PM
Modified
Jul 22, 2026, 8:10 PM

View source JSON

Severity
Important
Public date
Jun 2, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Jun 7, 2026, 2:45 PM

JSON